Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS50310.roa
File: AS50310.roa (raw, json)
Hash identifier: yqrlqz65OOvOFH0Fc6izYUXuj1G/NHre5D+RSzBiIvM=
Subject key identifier: A7:DF:AE:88:18:94:19:1E:A4:D4:03:AB:B2:C2:6C:86:01:79:B6:CC
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 131B70B987ADF05B16C9B92A42C43690B3D13732
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS50310.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 50310
IP address blocks: 2a06:a005:1d55::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:1b:70:b9:87:ad:f0:5b:16:c9:b9:2a:42:c4:36:90:b3:d1:37:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=A7DFAE881894191EA4D403ABB2C26C860179B6CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:70:86:0c:17:5a:9d:66:cc:f4:59:a1:bc:12:
35:e7:72:34:c7:e9:94:c3:37:13:93:01:6f:4d:3e:
17:8d:b6:e7:6b:28:dc:a3:ef:6b:b1:df:af:60:b1:
79:c3:fa:5f:ac:d9:98:42:1d:9b:e7:5c:56:09:72:
b1:f9:cc:fa:71:4c:39:5f:21:84:a3:ed:c0:53:cb:
71:4e:7d:b3:07:22:d2:91:d0:4c:da:a6:10:d9:81:
f9:b8:cb:c3:9f:5c:af:eb:5a:fe:6d:e8:19:e4:51:
c2:0b:28:8d:fe:a3:a0:26:77:78:e3:67:1c:64:27:
df:d0:ea:50:24:83:c7:74:3a:cb:0f:2d:98:b3:cd:
5a:a5:65:d1:9b:73:7f:ec:ff:2f:b5:09:3a:a0:48:
82:a2:b5:fc:75:93:20:7a:6c:f2:fe:f4:c2:46:d0:
b9:14:a4:55:98:f4:8c:e3:e8:d7:5e:5d:cd:3b:a1:
66:9e:b6:a8:57:ec:0a:5c:46:90:2c:b8:f3:ab:06:
21:e4:81:07:5e:2b:70:17:75:56:0a:34:1c:c4:de:
6c:bf:d7:de:a5:84:52:4a:51:4f:7a:e6:3b:9b:3e:
fb:0a:1b:ed:3e:95:a2:34:52:1e:60:5d:0f:fd:20:
c4:e9:97:b1:74:65:f8:67:8b:ce:fb:62:92:85:ba:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DF:AE:88:18:94:19:1E:A4:D4:03:AB:B2:C2:6C:86:01:79:B6:CC
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS50310.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d55::/48
Signature Algorithm: sha256WithRSAEncryption
26:9b:ef:27:73:30:60:26:a3:3a:3f:5c:48:56:7f:e5:c6:63:
05:76:9a:ec:2d:98:43:42:f7:84:27:1f:6d:43:78:16:26:61:
c4:09:69:35:cf:c1:92:d9:04:a2:54:3c:c6:4c:8e:40:8a:06:
1d:6d:5e:16:1d:1d:76:21:65:36:5d:e2:24:ce:13:b1:a9:ef:
89:59:8d:c2:f3:3d:2f:06:71:be:1c:72:52:27:96:98:13:7a:
76:54:4b:e3:20:de:8f:5b:eb:ac:f4:19:a8:e0:dc:04:fe:73:
37:99:90:bf:db:8f:33:79:90:75:8c:20:0f:ab:e2:87:38:da:
5f:c0:35:24:3b:fd:46:22:61:ec:08:fd:21:4a:f4:fd:fb:4c:
2a:e4:64:0c:b6:b2:41:8f:28:91:42:7f:7c:e1:09:21:d6:a5:
3e:ee:ce:97:7e:8b:36:d8:ed:a0:5d:13:06:33:07:cb:48:0a:
72:51:73:b2:d8:e2:28:7a:c1:30:5c:ab:47:d5:10:70:f5:19:
28:0b:75:3e:e4:3f:4a:a7:e3:1d:33:e6:a0:be:d2:41:10:30:
ca:28:fc:40:f4:1a:45:04:66:01:75:e8:4f:28:3f:1f:ed:8b:
f7:46:22:b3:f5:c1:a7:ce:13:3e:96:e8:4a:f8:56:d7:9d:be:
bb:e7:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:46 2025 by rpki-client